CVE-2022-28766: Zoom Meetings

High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability. A local low-privileged user could exploit this vulnerability to run arbitrary code in the context of the Zoom client.

Affected products

• Zoom Meetings: before 5.12.6 (fixed in 5.12.6)
• Zoom Rooms: before 5.12.6 (fixed in 5.12.6)

Published 2022-11-17. Last modified 2026-06-17.